trade-sentiment
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection through its data gathering requirements.
- Ingestion points: The skill instructs the agent to perform at least six targeted searches across news sites, Reddit, StockTwits, and X/Twitter. This untrusted external data is then incorporated into the agent's context for analysis.
- Boundary markers: The instructions do not include boundary markers or explicit warnings for the agent to ignore instructions that might be embedded within the search results (e.g., malicious headlines or social media posts designed to manipulate the sentiment score).
- Capability inventory: The agent is tasked with summarizing data and writing the output to a new markdown file. It does not possess high-risk capabilities such as arbitrary code execution or sensitive file system access.
- Sanitization: No sanitization or validation steps are defined for the data retrieved from external searches before it is processed by the scoring system.
Audit Metadata